CVE-2026-10156

A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.

Score
CVSS 4.0 5.3 Medium
Status
Deferred - cna@vuldb.com
Published
2026-05-31
Last modified
2026-06-01
Weaknesses
CWE-400, CWE-404

Affected products

References

 
 
© AVABIS GmbH privacypolicy about